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(54) Apparatus for detecting abnormal execution of program 

(57) An apparatus for detecting abnormality in exe- 
cution state of a control program; An electronic control 
unrt to which the apparatus for detecting abnormality is 
applied is provided with a CPU. and a memory for stor- 
ing a set value representing the number of sub-routines 
to be executed in each of a series of operations of the 
control program to be repeatedly executed. The CPU 
includes a control processor for drive-controlling a door 
lock motor by executing the control program; a counter 
for counting the number of the sub- routines that have 
been executed actually in each of the series of the oper- 
ations; and a detector which compares the set value 
stored in the memory with a count value of the counter 
at the last of the series of the operations, detects that 
the execution state of the cx>ntrol program is abnormal 
when the two values are different from each other, and 
then perfomns reset of the control processor. 
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Description 

BACKGROUND OF THE INVENTION 

1 . Field of the Invention 

[0001] The present invention relates to an appara- 
tus for detecting abnormal execution of program, which 
detects abnormality in execution state of a program, and 
particularly to an apparatus for detecting abnormality in 
execution state of a control program in an electronic 
control unit for automobile. 

2. Description of the Related Art 

[0002] . Rg. 3 is a block diagram showing the con- 
ventional structure of a door lock control system to 
which the present invention is applied. This control sys- 
tem is constructed so that a data processor (an elec- 
tronic control unit 3 for automobile) controls an electric 
instrument (a door lock motor 5) to be controlled accord- 
ing to input from input means (a door lock switch 1 ). and 
a CPU 3a of the electronic control unit 3 controls the 
door lock motor 5 based on a predetermined control 
program. 

[0003] In the control program, generally, a series of 
predetermined operations (predetermined process) is 
repeated to perform a control operation, as shown in 
Fig. 4. In the series of the operations, a plurality of sub- 
routines (sub-routines SR1 to SR4) are executed. Here, 
in the sub-routine SRI, reading of input from the door 
lock switch 1 is perfomied; in the sub-routine SR2, filter- 
ing Is performed in which whether the input from the 
door lock switch 1 Is not a noise but right is detected; in 
the sub-routine SR3, control determining operation for 
detetermining control of the door lock motor 5 in accord- 
ance with the input from the door lock switch 1 is per- 
formed; and in the sub-routine SR4, the detetenmtned 
control is output to the door lock motor 5 and an output- 
ting operation for drive-controlling the door lock motor 5 
is performed. 

[0004] In this electronic control unit 3, as shown in 
Fig. 4, when the electronic control unit 3 is actuated and 
an initial operation is perfomned in step STl, sequential 
steps ST2 to ST5 are repeated, whereby the sub-rou- 
tines SRI to SR4 are repeatedly executed. As a result, 
the control operation of the door lock motor 5 is per- 
formed based on the input from the door lock switch 1 . 
[0005] In the CPU 3a of the electronic control unit 3 
for executing this control program, during execution of 
the control program, the memory of the program coun- 
ter which indicates an executing position of the program 
(current position) is often disturbed by abnormality of a 
ROM or effects of noise, so that each of the sub-rou- 
tines SR1 to SR4 is not normally completed and the 
executing position of the program can be moved to the 
unexpected wrong position. In this case, there is possi- 
bility that runaway of the CPU 3a (electronic control unit 



3) Is caused. 

[0006] For example, as shown in Fig. 5, in a series 
of the operations, in case that step ST3 which must exe- 
cute the sub-routine SR2 is not executed but step ST4 
5 is executed after the sub-routine SR1 is completed in 
step ST2, as the sub-routine SR2 is not executed, differ- 
ence occurs among the various data in the control pro- 
gram and a wrong operation or runaway can occur. 
Further, to the contrary, there is also a case that each of 
10 the sub-routines SR1 to SR4 Is wrongly repeated and 
unnecessarily executed in a series of the operations, 
which may also cause the wrong operation or the like. 
[0007] However, in the above-described conven- 
tional art, in case that any one of the sub-routines SRI 
15 to SR4 to be executed is not executed or in case that 
any one of the sub-routines SRI to SR4 is unnecessar- 
ily executed repeatedly in a series of the operations to 
be repeatedly executed of the control program, meas- 
ures to meet the respective cases are not taken. There- 
to fore, there is a problem that the wrong operation and 
runaway of the electronic control unit 3 caused by not 
suitably executing the predetermined sub-routines SRI 
to SR4 to be scecuted thoroughly cannot be prevented. 

25 SUMMARY OF THE INVENTION 

[0008] In . view of the above problem, an object of 
the present invention Is to provide an apparatus for 
detecting abnormal execution of program, which can 
30 previously prevent the wrong operation and runaway of 
a data processor caused by not suitably executing sub- 
routines to be executed thoroughly in a predetermined 
process of the control program. 

[0009] In order to achieve the above object, accord- 

35 ing to the invention, there is provided an apparatus for 
detecting abnormal execution of program, which detects 
abnormality In execution state of program in a data 
processor that performs a predetermined data process- 
ing by executing a program having a plurality of sub-rou- 

40 tines to be executed in a predetermined process, 
comprising: memory means which is provided in the 
data processor and stores a set value representing the 
number of the sub-routines to be executed in the proc- 
ess of the program; counting means which is provided 

45 in the data processor and counts the number of the sub- 
routines that have been actually executed in the process 
of the program; and detecting means which is provided 
in the data processor, compares the set value stored in 
the memory means with a count value of the counting 

50 means In the last step of the process and then detects 
that the execution state of the program is abnormal in 
case that the two values are different from each other. 
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BRIEF DESCRIPTION OF THE DRAWINGS 
[0010] 

Rg. 1 is a block diagram of a door lock control sys- 
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tem to which am apparatus for detecting abnormal 
execution of program according to an embodiment 
of the present invention is applied. 
Fig. 2 is a flowchart showing a process for execut- 
ing a control program of the door lock control sys- 
tem in Fig. 1 . 

Fig. 3 is a block diagram showing the conventional 
structure of a door lock control system to which the 
invention is applied. 

Fig. 4 is a flowchart showing a process for execut- 
ing a control program of the door lock control sys- 
tem in Fig. 3. 

Fig. 5 is a chart showing a case where a sub-rou- 
tine has not been erroneously executed in the proc- 
ess for executing the control program in Fig. 4. 

DETAILED DESCRIPTION OF THE PREFERRED 
EMBODIMENT 

[0011] Fig. 1 is a block diagram of a door lock con- 
trol system to which an apparatus for detecting abnor- 
mal execution of program according to an embodiment 
of the invention is applied, and Fig. 2 is a flowchart 
showing a process for executing a control program of 
the door lock control system of Fig. 1. In Figs. 1 and 2, 
parts corresponding to those in Figs. 3 and 4 are 
marked with the same reference numerals and signs as 
those in Figs. 3 and 4. Therefore, their descriptions are 
omitted. 

[0012] As shown in Fig. 1, an electronic control unit 
3 is provided with a CPU 3a for drive-controlling a door 
lock motor 5 according to input from a door lock switch 
1 by executing a predetemriined control program, and a 
memory (memory means) 3b for storing the control pro- 
gram, control data, and the like therein. The control pro- 
gram has the aforesaid plural sub-routines SR1 to SR4 
similarly to the control program shown in Fig. 4, and 
these plural sub-routines SRI to SR4 are repeatedly 
executed as shown in Rg. 2 to perform a control opera- 
tion. A set value representing the number of the sub- 
routines SRI to SR4 to be executed in each of a series 
of. ope.ratipns of .the„contrpLprogram to be repeatedly 
executed is stored in the memory 3h. 
[0013] The CPU 3a comprises a control processor 
(control processing means) 3c for drive-controlling the 
door lock motor 5 according to input from the door lock 
switch 1 by repeatedly executing the sub-routines SRI 
to SR4 included in the control program; a counter 
(counting means) 3d for counting the number of the 
sub-routines SR1 to 5R4that have been executed actu- 
ally by the control processor 3c in each of the series of 
the operations; and a detector (detecting means) 3e 
which compares the set valued stored in the memory 3b 
with a count value of the counter 3c at the last of the 
series of the operations, detects that the execution state 
of the control program is abnormal when the two values 
are different from each other, and then performs a pre- 
determined error processing such as reset of the control 



processor 3c. 

[0014] In this embodiment, a second constitution 
(memory means, counting means and detecting 
means) for detecting abnormality in the execution state 

5 of the control program is integrally incorporated into a 
first constitution (CPU 3a and memory 3b) for control- 
ling the door lock motor 5 by executing the control pro- 
gram. However, the second constitution is not 
incorporated into the first constitution integrally but ded- 

10 icated CPU and memory which serve as the second 
constitution may be provided. 

[0015] Next, a process for executing the control pro- 
gram of the electronic control unit 3 will be described 
with reference to Fig. 2. After the electronic control unit 

75 3 is actuated and a predetermined initial operation is 
performed in step ST1 , a series of operations including 
steps ST2 to ST8 is repeated, whereby while the abnor- 
mality in the execution state of the control program is 
detected, the door lock motor 5 is controlled based on 

20 inputs from the door lock switch 1 . 

[0016] Each of steps ST2 to ST5 comprises two 
steps, one of which is steps ST2a to ST5a, and the 
other of which is sequential steps ST2b to ST5b. In first 
steps ST2a to ST5a, the aforesaid normal operation of 

25 each of the corresponding sub-routines SR1 to SR4 is 
executed by the control processor 3c, and after execu- 
tion of the nonnal operation is completed, the procedure 
proceeds to steps ST2b to ST5b. 

[0017] In the sequential steps ST2b to ST5b, after 

30 execution of each sub-routine SR1 to SR4 is completed, 
a counting operation is performed by the counter 3d. 
Namely, every time each of the sub-routines SR1 to 
SR4 to be executed in the series of operations is suita- 
bly executed, one is added to the count value of the 

35 counter 3d In order. Hereby, the number of the sub-rou- 
tines that have been executed is counted. When the 
execution of all the sub-routines SRI to SR4 to be exe- 
cuted is completed, the procedure proceeds to step 
ST6. In case that each of the sub-routines SRI to SR4 

4o to be executed is suitably executed thoroughly, the 
count value of the counter 3c indicates the suitable pre- 

. . determined value.(in this. case, the count value is.four).,. 
[0018] in step ST6, the detector 3e compares the 
set value representing the number of the sub-routines 

45 SRI to SR4 to be executed in the series of operations 
with the count value of the counter 3d and then judges 
whether the two values agree with each other. In case 
that each of the sub-routines SR1 to SR4 to be exe- 
cuted is suitably executed thoroughly and the two val- 

50 ues agree with each other, the procedure proceeds to 
step ST7 in which the count value of the counter 3d is 
cleared, and then the procedure returns to step ST2 in 
which the series of the operations are repeated. On the 
other, in case that each of the sub-routines SR1 to SR4 

55 to be executed is not executed, or is unnecessarily 
repeated and executed, and the both values do not 
agree with each other, the procedure proceeds to step 
ST8 in which the detector 3e performs an error process- 
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ing operation. 

[0019] , In the error processing operation of step 
ST8, for example, the operation of the control processor 
3c is reset once (initialized) in order to prevent the 
wrong operation, and thereafter the procedure returns 
to the start to repeat the series of the operations from 
step ST1. 

[0020] As described above, according to this 
embodiment, in case that the sub-routines SR1 to SR4 
to be executed are not executed in the series of the 
repeatedly executed operations of the control program, 
or they are unnecessarily repeated and executed, the 
difference occurs between the set value stored in the 
memory 3b and the count value of the counter 3d. The 
presence of this difference is detected by the detector 
3e, whereby it can be reliably detected that the sub- rou- 
tines SRI to SR4 to be executed have been not suitably 
executed thoroughly, so that the wrong operation and 
runaway of the electronic control unit 3 caused by the 
bad execution of these sub-routines SR1 to SR4 can be 
previously prevented. 

[0021] In this embodiment, a case where the inven- 
tion is applied to the door lock control system for oontroi- 
ling the door lock motor 5 is described, however, the 
invention is not limrted to this. 

[0022] According to the invention, in case that the 
sub-routines to be executed in the predetennined proc- 
ess of the program are not executed, or in case that they 
have been unnecessarily repeated and executed, as the 
difference occurs between the set value stored in the 
memory means and the count value of the counting 
means, the presence of this difference is detected by 
the detecting means, whereby it can be reliably 
detected that the sub- routines to be executed have not 
been suitably executed thoroughly Therefore, the 
wrong operation and runaway of the data processor 
caused by the bad execution of these sub-routines can 
be previously prevented. 
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3. 



said memory means with a count value of said 
counting means in the last step of the process 
and then detects that the execution state of the 
program is abnormal in case that the two val- 
ues are different from each other. 

The apparatus according to claim 1 , further com- 
prising control processing means which is provided 
in said data processor and drive-controls an electric 
instrument to be controlled according to input from 
input means by repeatedly executing the plurality of 
sub-routines included in the program. 

The apparatus according to claim 2, wherein said 
input means is a door lock switch and said electric 
instrument to be controlled is a door lock motor. 



Claims 



40 



1. An apparatus for detecting abnomrial execution of 
program, which detects abnormality in execution 
state of program in a data processor that performs 
a predetermined data processing by executing a 45 
program having a plurality of sub-routines to be 
executed in a predetermined process, comprising: 



memory means which is provided in said data 
processor and stores a set value representing so 
the number of the sub-routines to be executed 
in the process of the program; 
counting means which is provided in said data 
processor and counts the number of the sub- 
routines that have been actually executed in 55 
the process of the program; and 
detecting means which is provided in sakl data 
processor, compares the set value stored in 
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